Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json)
Hash identifier: BSn3TgNiVZ3I8rTr/o4rRH8BTFmAQ6FJ9w0MkPO2fjw=
Subject key identifier: 87:19:F9:1D:33:CD:93:71:C9:24:B0:CE:7F:F3:A9:D6:03:53:83:E1
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
Manifest number: FB
Signing time: Fri 31 Jan 2025 04:18:44 +0000
Manifest this update: Fri 31 Jan 2025 04:18:43 +0000
Manifest next update: Fri 07 Feb 2025 04:18:43 +0000
Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: 2YrOY29jQv7i3XueHcxMMXHd1/6/Ws5bBE7moTLeNYY=)
2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: a5Qs3LUcbSVUj/0GZbXTErNFIjAHGfhVv7lawUtiA/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Validity
Not Before: Jan 31 04:18:43 2025 GMT
Not After : Feb 7 04:18:43 2025 GMT
Subject: CN=679c4f23-c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:f2:fb:29:ea:c3:e3:b6:36:c8:c4:c2:ce:
87:57:15:70:b3:8f:9c:8a:9f:09:c7:11:1f:f9:a7:
6d:02:3a:7a:ea:d7:cd:23:59:c1:2b:8a:23:aa:70:
61:78:fb:7b:91:c0:43:20:0a:59:17:42:38:62:e4:
a7:74:09:55:99:fd:b2:a9:4f:8d:ea:8f:78:77:d9:
06:4a:e1:a4:ab:d2:f5:7d:3e:e8:4a:79:8c:b1:dc:
20:be:6b:a9:dc:38:b4:73:29:33:fc:56:f5:ea:33:
2a:a7:38:f8:c9:35:8b:89:78:16:4b:8e:d9:11:cc:
81:03:eb:ec:aa:90:49:b5:ec:3d:13:3c:45:2d:95:
83:3a:30:e1:88:3f:83:0e:d9:1f:fb:6e:9e:cf:66:
e5:40:0c:a9:bc:d5:03:6e:aa:f7:99:fa:c5:88:50:
a0:c2:cc:8a:19:a2:83:84:e2:fd:8a:01:33:fe:fa:
a4:10:03:dc:3a:66:34:96:46:2f:5c:93:55:03:21:
a4:f3:df:cc:b1:89:bc:2e:19:b9:aa:a6:0d:1b:13:
8d:77:f4:cb:4a:03:ac:4a:60:04:44:c7:93:9b:44:
72:80:af:32:38:bd:eb:1c:6a:ce:1d:ec:30:8d:cc:
07:07:09:40:42:87:e8:e0:46:99:30:22:cc:97:19:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:F9:1D:33:CD:93:71:C9:24:B0:CE:7F:F3:A9:D6:03:53:83:E1
X509v3 Authority Key Identifier:
keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:5b:f1:f8:5f:70:a9:80:32:d4:9d:e1:86:c4:1b:72:07:
9c:9e:19:68:ef:f5:92:9a:af:a8:5f:ac:bf:b7:ec:1d:2a:79:
f5:f1:05:31:87:fc:e5:6f:e8:3f:5d:f1:f0:de:fa:7b:88:7f:
b7:76:5d:d5:ed:99:c0:88:b0:ca:cf:53:7d:8f:ea:0b:8e:c2:
24:d2:61:b5:ff:36:4a:96:47:82:2b:da:8e:a7:57:1e:0b:06:
4b:16:ef:e7:f2:ba:3e:95:bf:52:27:55:92:3e:1e:f8:a0:9e:
ff:c6:c6:93:e9:7d:f1:a8:60:ad:71:75:87:c3:99:0f:c3:e9:
7c:07:2d:f9:3e:ff:49:ea:ca:9e:83:67:ed:79:5d:e7:cd:10:
88:89:76:d4:c1:e4:d6:f7:e1:f4:46:22:78:c9:9d:da:b3:03:
66:47:87:c9:a2:1f:d4:3b:4a:a6:16:e4:d4:d3:5f:6d:59:2d:
a8:64:d0:29:12:2e:ab:a1:10:f5:64:00:a1:d9:f2:26:2f:17:
ee:13:cd:87:a1:f8:2f:35:d0:c3:61:a9:97:bc:2c:7e:34:5b:
5e:73:ad:14:78:a7:f6:fc:d0:ca:c4:36:7f:f7:16:a1:65:fb:
c6:98:66:f9:1e:a1:2e:4a:a1:dd:95:93:35:a6:59:ed:8d:c9:
3b:12:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:28 2025 by rpki-client